Linux will support SHSTK in userspace and glibc will eventually have support to use it and subsequently enable shadow stacks on all binaries that are marked up with SHSTK in ELF notes. Rust still does not have support for cf-protection in a stable release yet and hence compiled binaries don't have the SHSTK markup. This is problematic for applications that dlopen rust based plugins, since that will be unsupported and hence result in program termination. Work on rust support is ongoing; CET support is in unstable but there are still some loose ends to resolve, e.g. actual generation of the property note. Track rebase of rust into rawhide, to the version that supports SHSTK markup in ELF binaries generated by rust so that dependent packages can be rebuilt with it. References: https://github.com/rust-lang/rust/issues/73820 https://github.com/rust-lang/rust/pull/110304 Reproducible: Always
This bug appears to have been reported against 'rawhide' during the Fedora Linux 39 development cycle. Changing version to 39.